WINDOWS SERVER 2008 SECURITY AUDITING UPGRADE
WINDOWS SERVER 2008 SECURITY AUDITING CODE

For unsupported native applications either upgrade to supported versions or, if this is not possible, consider removing the application or using alternative applications to achieve similar business functionality.

WINDOWS SERVER 2008 SECURITY AUDITING CODE

Application control, when implemented appropriately, can detect and prevent malicious code execution and network propagation attempts by an adversary.

Implement application control, such as MicrosoftвЂ™s AppLocker.

Organisations continuing to operate a fleet of Microsoft Windows Server 2008 and Windows Server 2008 R2 servers beyond the end of support date should implement the following mitigation strategies:

Operating a fleet of Microsoft Windows Server 2008 and Windows Server 2008 R2 servers The advice is separated into mitigation strategies for organisations operating a fleet of Microsoft Windows Server 2008 and Windows Server 2008 R2 servers, and mitigation strategies for organisations that have a limited number of Microsoft Windows Server 2008 and Windows Server 2008 R2 servers in order to support legacy business applications. The advice in this publication is intended for organisations unable to upgrade from Microsoft Windows Server 2008 and Windows Server 2008 R2. Organisations yet to upgrade to a newer supported operating system should review their risk assessments and begin planning for the implementation of mitigation strategies to reduce their risk exposure вЂ“ noting there will still be an overall increase in risk exposure until such a time that Microsoft Windows Server 2008 and Windows Server 2008 R2 servers are upgraded. Organisations using Microsoft Windows Server 2008 and Windows Server 2008 R2 should upgrade to the latest version of Microsoft Windows Server 2016 or Windows Server 2019 to continue receiving patches for security vulnerabilities, while also benefiting from security improvements in the newer operating systems. Subsequently, adversaries may use these unpatched security vulnerabilities to target Microsoft Windows Server 2008 and Windows Server 2008 R2 servers. As such, organisations no longer receive patches for security vulnerabilities identified in these products. On 14 January 2020, Microsoft ended support for Microsoft Windows Server 2008 and Windows Server 2008 R2. The Strategies to Mitigate Cyber Security Incidents ranks timely patching of security vulnerabilities, as well as using the latest operating system versions, as essential mitigation strategies in preventing cyber security incidents.

Windows server 2008 security auditing